Observed arrival · 2026-11-14
Skirm makes the $5 opening move on app security testing
A web-app security-testing service lets coding agents prepare a scoped test, with a $5 run and an optional full report if it finds qualifying issues.
- For
- Owners of web apps who want scoped security testing
- Worth noticing
- The setup flow excludes payment, email, deletion, and logout routes, and agent tokens cannot approve the final scope.
Field notes
The setup instructions support MCP clients and a skill-file route for agents without MCP. The proposed scope leaves out checkout, password resets, outgoing email, and deletion endpoints; the owner must review and approve it, and the page says agent tokens cannot perform that approval. Skirm says runs default to five requests per second and finish in a few hours. Its displayed report is explicitly labeled a made-up example, not a result from a real assessment.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue